Can a form change session variables?

[Kurda Yon]

Hi,

In the first page I declare a session variable. Than, on the same
page, I make a form which contains a variable which has the same name
as the mentioned session variable. Pressing the "submit" button of the
form I go to the second page which immediately redirects me back to
the first page (with the "header"). And the mentioned variable does
NOT have the value which I have specified in the form.

It means, that session does NOT recognize the form variables as
session variables in spite on the fact that these variables have
identical names. Is that true?

[Peter Pei]

thanks to PHP's globals

[Kurda Yon]

On Jan 12, 9:54 pm, "Peter Pei" <yan...@telus.c omwrote:

thanks to PHP's globals

What do you mean?

[seaside]

On 13 Jan., 03:51, Kurda Yon <kurda...@yahoo .comwrote:

In the first page I declare a session variable. Than, on the same
page, I make a form which contains a variable which *has the same name

PHP does not automaticall register variables with your session.

Please review http://de.php.net/manual/en/ref.session.php for details.

Do you access your (expected) form/session variable like this:
$_SESSION['count'] ?

[Peter Pei]

version? setting? did you ask? obviously possible

[Jerry Stuckle]

Kurda Yon wrote:

Hi,

In the first page I declare a session variable. Than, on the same
page, I make a form which contains a variable which has the same name
as the mentioned session variable. Pressing the "submit" button of the
form I go to the second page which immediately redirects me back to
the first page (with the "header"). And the mentioned variable does
NOT have the value which I have specified in the form.

It means, that session does NOT recognize the form variables as
session variables in spite on the fact that these variables have
identical names. Is that true?

It used to - there is a parm in the php.ini file called register_global s.

In earlier versions, this was enabled and would do what you want.
However, this is a huge security risk and has been disabled by default
in recent versions.

It's simple to get the variable from the session, though.

--
=============== ===
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
js*******@attgl obal.net
=============== ===

[Kurda Yon]

On Jan 12, 9:57 pm, seaside <seaside...@mac .comwrote:

On 13 Jan., 03:51, Kurda Yon <kurda...@yahoo .comwrote:

In the first page I declare a session variable. Than, on the same
page, I make a form which contains a variable which has the same name

PHP does not automaticall register variables with your session.

What do you mean under "PHP ... register"? I have registered variables
by "session_regist er".

Please reviewhttp://de.php.net/manual/en/ref.session.php for details.

Do you access your (expected) form/session variable like this:
$_SESSION['count'] ?

No. I do like that:
session_start() ;
session_registe r("txt_l_1");
...........
print "<input type='text' name='txt_l_1' value=\"$txt_l_ 1\" >\n";

[Kurda Yon]

It's simple to get the variable from the session, though.
I do not mind if the user know all session variables there is only
HIS personal information. Or you mean "simple to get for the third
part"?

[Jerry Stuckle]

Kurda Yon wrote:

>It's simple to get the variable from the session, though.

I do not mind if the user know all session variables there is only
HIS personal information. Or you mean "simple to get for the third
part"?

The user has no knowledge of anything in the session (other than the
session name), since everything is on the server (and thus unavailable
to the user).

And yes, you stored the value in the session, so it's easy to retrieve
it from the session whenever you need it. It will be there until either
you clear it or the session is ended.

--
=============== ===
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
js*******@attgl obal.net
=============== ===

[Peter Pei]

register_global is actually broken in 5.2.5, set it to off and it still acts
as if on.